Hacker News new | ask | show | jobs
by theseanl 1909 days ago
I did found that the codebase does not seem to be using any `browser.clipboard` API, so `clipboardWrite` permission seems to be unnecessary. According to [MDN](https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...), `browser.clipboard` API mainly exists to enable extensions to write image contents to clipboards, and all the ClearURL needs is writing texts. Also, [another MDN page on clipboard interactions](https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...) states that extensions do not need `clipboardWrite` permissions to write to clipboards, e.g. by using `document.execCommand('copy')`.

Hopefully, removing this permission could help getting the extension restored.

1 comments

It seems there's a line which requires such permission:

https://github.com/ClearURLs/Addon/blob/master/external_js/c...

    document.execCommand("copy");
I personally do not know, just going by what's stated within the URL in the adjoining comment (https://github.com/mdn/webextensions-examples/tree/master/co...).
Confusingly, according to the MDN document I linked, that permission is not needed.

Clipboard APIs are in general pretty permissive in writing, any websites can write anything to the clipboard without requesting any permission, if it's done within like 1000ms or so from user interaction. So you don't even need an extension to write to clipboard.